On March 17, 2026, Hewlett Packard Enterprise Co. (NYSE: HPE) released its inaugural cyberthreat research report, titled *In the Wild*. This comprehensive study details a significant transformation in the modus operandi of modern cyber adversaries, highlighting an alarming trend toward industrial-scale cybercrime. With cybercriminals increasingly utilizing automation and exploiting long-standing vulnerabilities, the report outlines a pressing need for organizations to bolster their cybersecurity measures.

2. Key Findings of the Report

HPE's analysis examined 1,186 active threat campaigns conducted worldwide throughout 2025. The data reveals a rapidly evolving adversarial ecosystem characterized by professionalism, organizational structure, and strategic targeting. Key insights from the report include:

Volume and Sophistication of Attacks: The report indicates a sharp rise in both the number of attacks and the complexity of tactics employed by cybercriminals. Adversaries are operating with the discipline and efficiency of large enterprises, employing hierarchical command structures and specialized teams to execute expansive attack strategies.

Targeted Sectors: Government organizations emerged as the most targeted sector, accounting for 274 campaigns. The finance and technology sectors followed closely, with 211 and 179 campaigns, respectively. This focus underscores a strategic prioritization of sectors that hold sensitive data and are critical to national infrastructure.

Malicious Activity: Throughout 2025, over 147,000 malicious domains and nearly 58,000 malware files were deployed. Additionally, 549 vulnerabilities were actively exploited, showcasing the professionalization of cybercrime and the challenges in disrupting organized campaigns.

3. The Role of Automation and AI

As outlined in the report, cyber adversaries have increasingly adopted automation and artificial intelligence to enhance their operational efficiency. Notable techniques include:

Real-Time Data Exfiltration: Attackers utilized automated workflows via platforms like Telegram for real-time data exfiltration, allowing them to act swiftly and evade detection.

Generative AI for Fraud: Cybercriminals leveraged generative AI to create synthetic voices and deepfake videos for sophisticated phishing attacks, including vishing and impersonation fraud.

These advancements enable adversaries to reach more targets and concentrate their efforts on sectors vital to economic stability and critical national infrastructure.

4. Strengthening Cyber Resilience

To combat these escalating threats, HPE outlines several practical steps organizations can adopt to improve their cybersecurity posture:

Enhance Collaboration: Breaking down silos by sharing threat intelligence across corporate teams and industries can surface attack patterns earlier.

Patch Vulnerabilities: Addressing common entry points, such as VPNs and edge devices, is crucial for reducing exposure to attacks.

Implement Zero Trust Principles: Strengthening authentication and limiting lateral movement can significantly enhance network security.

Improve Visibility and Response: Utilizing advanced threat intelligence and AI-native detection technologies can help organizations react more swiftly and accurately to incidents.

Extend Security Measures: Organizations should extend security beyond traditional perimeters to encompass home networks, third-party tools, and supply chain environments.

5. HPE Threat Labs: A New Era in Cyber Defense

In response to the evolving cyber threat landscape, HPE has established HPE Threat Labs, uniting security research expertise from both HPE and Juniper Networks. According to David Hughes, SVP & GM of SASE and Security for Networking at HPE, this initiative aims to translate threat intelligence into actionable insights, helping organizations mitigate risk and protect vital systems.

6. Conclusion

The HPE Threat Labs *2026 In the Wild* Threat Report paints a sobering picture of the current cyber threat landscape, revealing a shift toward industrialized cybercrime that demands urgent attention from organizations across all sectors. As cyber adversaries continue to evolve their tactics and strategies, the importance of robust cybersecurity measures has never been more critical. The report serves as a clarion call for businesses to strengthen their defenses and adapt to the relentless pace of modern cyber threats.

For those interested in further exploring the findings of the report, it is available now for CISOs, security leaders, and IT decision-makers. Attendees can also visit the HPE showcase during the RSA Conference 2026, from March 23-26, at booth #1255 in the South Hall of the Moscone Center.

Original press release